Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: 5SHNX1uZkvpOsz/ns+rwTnRUaP8pAZETlUiuH156rF8=
Subject key identifier: 35:9B:5A:29:AB:A7:CE:BF:F1:33:4A:10:37:5B:08:A2:28:DE:FD:87
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 01974D0DA68515CEE7AD746B5924D389E098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:00:29 +0000
Manifest this update: Sun 08 Jun 2025 01:00:29 +0000
Manifest next update: Mon 09 Jun 2025 01:00:29 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: S8pr9RRwA9sFC0xyAyXgP/EGZ3yIEq7zY4e0IJHNBbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:a6:85:15:ce:e7:ad:74:6b:59:24:d3:89:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Jun 8 01:00:29 2025 GMT
Not After : Jun 9 01:00:29 2025 GMT
Subject: CN=359b5a29aba7cebff1334a10375b08a228defd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:b4:18:c4:37:e4:ff:f1:24:2a:d8:69:78:
68:ff:95:a2:1d:a2:b2:2d:90:de:29:c8:43:f9:99:
d9:de:bf:69:28:7f:22:2a:29:1c:04:c1:0b:92:49:
fe:32:70:4a:f3:c6:65:fb:cd:63:e7:2d:65:5f:de:
be:a3:c8:31:5d:fc:15:be:e3:c5:2e:4d:72:33:e4:
b9:99:b4:7f:54:06:10:ed:24:94:7c:24:ac:89:85:
fe:e4:43:7f:27:ce:b7:4e:45:55:db:69:01:95:c3:
9d:8d:b4:a9:b0:71:10:35:b0:e5:a2:0e:79:6d:2c:
23:fd:21:1d:19:0d:69:79:02:02:cd:e3:5f:b6:fb:
5b:e1:fe:d0:2f:94:3f:4f:94:c1:2e:d5:0c:95:f9:
29:7d:78:07:8a:62:ff:a0:46:97:1e:a3:ba:26:c4:
f2:2d:1e:c0:5e:7e:27:2d:3c:9b:67:d8:d0:8f:2a:
65:78:de:c8:e7:bc:66:7e:23:b4:e1:dd:57:93:52:
f7:0d:7f:e5:33:8e:b5:59:59:da:51:46:60:dc:45:
6f:d0:93:f1:36:c8:ec:18:2c:b0:b0:dc:a9:1a:58:
39:ff:51:4f:cf:f4:fc:ca:4a:bf:8a:33:6f:bd:c4:
d2:ab:03:b0:71:91:f9:11:a7:3f:17:85:fb:53:31:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9B:5A:29:AB:A7:CE:BF:F1:33:4A:10:37:5B:08:A2:28:DE:FD:87
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:46:fc:6b:38:b7:2e:67:65:aa:69:d6:e9:4e:9a:66:a9:9f:
8b:fe:1e:7b:40:02:05:5c:41:e8:9f:3e:6b:a6:98:27:de:6b:
46:27:d8:08:92:99:b7:a6:38:20:d5:03:b5:03:d4:dc:17:6c:
54:1a:7b:0c:2b:33:f2:83:61:19:9e:dc:13:e0:10:9c:c2:0a:
b0:d8:06:2a:c0:63:4b:02:74:4e:16:4f:93:d0:2c:ec:6c:08:
55:c0:dc:69:b1:2d:55:f5:c8:7d:42:dd:8e:8c:ea:a8:c2:b9:
7b:da:4f:14:43:2a:ed:c5:97:64:10:93:eb:37:85:1d:4a:84:
57:b7:d2:d7:69:7a:97:10:f4:c7:bc:b0:05:dc:ae:10:8e:ee:
7f:a4:f0:10:2b:e1:f2:ef:55:b4:06:89:f5:b5:7b:eb:22:4f:
ed:0f:57:b3:0e:86:73:3c:75:a0:5e:af:b1:2e:0b:71:d8:fe:
da:77:fd:48:f9:21:63:0a:31:d2:59:2f:2e:47:98:1d:b2:d2:
b0:37:4e:95:1d:44:61:cc:13:3c:40:da:93:3e:b5:79:83:6d:
15:04:63:82:d7:29:e9:4c:e1:8c:ae:94:f0:5a:4f:66:6c:ec:
84:28:18:5f:20:1b:02:76:66:7d:ee:dd:2f:fc:28:aa:a0:b8:
76:b5:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:24 2025 by rpki-client